Overview
Every agent action, model call, token cost, verdict, and GDPR operation is written to an append-only log file. Each entry includes a SHA-256 hash of the previous entry — any tampering is detected on read.
Log Schema
Each log entry contains: - `timestamp` — ISO 8601 - `principal` — authenticated user/service - `tenantId` — tenant scope - `action` — event type (lane:start, llm:call, verdict:issued, gdpr:export, etc.) - `payload` — event-specific data - `prevHash` — SHA-256 of previous entry - `hash` — SHA-256 of this entry
